Single Click Delta Analysis

2. The system of claim 1, wherein the user request comprises a selection of a user interface element.

3. The system of claim 1, wherein the first and second sets of status information results are divided based on a spatial characteristic based on the node that generated the logs messages or metrics.

4. The system of claim 1, wherein the user request further comprises requesting variance for at least one of a time window and a cohort of users.

5. The system of claim 1, wherein the first and second sets of status information results comprise tables, and wherein the one or more processors are further configured to join the first and second sets of status information results on a key column.

6. The system of claim 1, wherein the second query and the third query generated from the first query comprise a same query, associated with different nodes.

7. The system of claim 1, wherein the second query and the third query generated from the first query comprise different queries associated with different nodes.

8. The system of claim 1, wherein the first query comprises a query for log messages, and wherein the user request comprises an indication to compare a first group of log messages from the first node against a second group of log messages from the other nodes.

9. The system of claim 8, wherein the first and second sets of status information results comprise first and second sets of log messages.

10. The system of claim 9, wherein the one or more processors are further configured to cluster the first set of log messages and to cluster the second set of log messages, and wherein a cluster is associated with a corresponding signature comprising a template for log messages included in the cluster.

11. The system of claim 10, wherein the one or more processors are further configured to determine a count of a number of log messages in a given cluster.

12. The system of claim 11, wherein the one or more processors are further configured to join, based at least in part on signatures, the first set of clustered log messages and the second set of clustered log messages.

13. The system of claim 12, wherein determining the variance between the first set of status information results and the second set of status information results comprises determining at least one of a difference in a number of logs in a given cluster, a presence of a cluster in the first set of status information results but not in the second set of status information results, and a presence of a cluster in the second set of status information results but not the first set of status information results.